update readme
This commit is contained in:
parent
155a49f097
commit
d882455619
18
README.md
18
README.md
@ -1,4 +1,3 @@
|
|||||||
```bash
|
|
||||||
# Enable/disable automatic signing on kernel updates# Kernel Signer
|
# Enable/disable automatic signing on kernel updates# Kernel Signer
|
||||||
|
|
||||||
A secure boot kernel signing utility for Red Hat based systems (RHEL, CentOS, Fedora, Rocky Linux, AlmaLinux, etc.).
|
A secure boot kernel signing utility for Red Hat based systems (RHEL, CentOS, Fedora, Rocky Linux, AlmaLinux, etc.).
|
||||||
@ -17,11 +16,9 @@ This package provides a comprehensive solution for signing Linux kernels with cu
|
|||||||
### Building the RPM
|
### Building the RPM
|
||||||
|
|
||||||
1. Install build dependencies:
|
1. Install build dependencies:
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
# RHEL/CentOS/Rocky/Alma
|
# RHEL/CentOS/Rocky/Alma
|
||||||
sudo dnf install rpm-build rpmdevtools
|
sudo dnf install rpm-build rpmdevtools
|
||||||
|
|
||||||
# Create build environment
|
# Create build environment
|
||||||
rpmdev-setuptree
|
rpmdev-setuptree
|
||||||
```
|
```
|
||||||
@ -86,26 +83,15 @@ Edit `/etc/ksigner/ksigner.conf` to customize behavior:
|
|||||||
# Enable/disable automatic signing on kernel updates
|
# Enable/disable automatic signing on kernel updates
|
||||||
SIGN_ON_UPDATE=true
|
SIGN_ON_UPDATE=true
|
||||||
|
|
||||||
# Type of automatic signing (sign, sign-lts, sign-all, sign-all-lts)
|
# Type of automatic signing (sign, sign-all)
|
||||||
AUTO_SIGN_TYPE="sign-lts"
|
AUTO_SIGN_TYPE="sign-all"
|
||||||
|
|
||||||
# Define which kernel versions are considered LTS
|
|
||||||
LTS_VERSIONS=(
|
|
||||||
"6.12"
|
|
||||||
"6.6"
|
|
||||||
"6.1"
|
|
||||||
"5.15"
|
|
||||||
"5.10"
|
|
||||||
)
|
|
||||||
```
|
```
|
||||||
|
|
||||||
## Commands
|
## Commands
|
||||||
|
|
||||||
- `ksigner setup` - Create and install signing keys
|
- `ksigner setup` - Create and install signing keys
|
||||||
- `ksigner sign [kernel_file]` - Sign a kernel (latest if no file specified)
|
- `ksigner sign [kernel_file]` - Sign a kernel (latest if no file specified)
|
||||||
- `ksigner sign-lts [kernel_file]` - Sign an LTS kernel
|
|
||||||
- `ksigner sign-all` - Sign all available kernels
|
- `ksigner sign-all` - Sign all available kernels
|
||||||
- `ksigner sign-all-lts` - Sign all LTS kernels
|
|
||||||
- `ksigner status` - Show signing key status
|
- `ksigner status` - Show signing key status
|
||||||
- `ksigner version` - Show version information
|
- `ksigner version` - Show version information
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user